Unload feature + bug fixes

KsDumperClient/Driver/DriverInterface.cs

@@ -7,7 +7,7 @@
 
 namespace KsDumperClient.Driver
 {
-    public class DriverInterface
+    public class DriverInterface : IDisposable
     {
         private readonly IntPtr driverHandle;
 
@@ -106,5 +106,25 @@ public bool CopyVirtualMemory(int targetProcessId, IntPtr targetAddress, IntPtr
             }
             return false;
         }
+
+        public bool UnloadDriver()
+        {
+            if (driverHandle != WinApi.INVALID_HANDLE_VALUE)
+            {
+                return WinApi.DeviceIoControl(driverHandle, IO_UNLOAD_DRIVER, IntPtr.Zero, 0, IntPtr.Zero, 0, IntPtr.Zero, IntPtr.Zero);
+            }
+            return false;
+        }
+
+        public void Dispose()
+        {
+            WinApi.CloseHandle(driverHandle);
+        }
+
+        ~DriverInterface()
+        {
+            WinApi.CloseHandle(driverHandle);
+        }
+
     }
 }

KsDumperClient/Driver/Operations.cs

@@ -10,6 +10,8 @@ public static class Operations
 
         public static readonly uint IO_COPY_MEMORY = CTL_CODE(FILE_DEVICE_UNKNOWN, 0x1725, METHOD_BUFFERED, FILE_ANY_ACCESS);
 
+        public static readonly uint IO_UNLOAD_DRIVER = CTL_CODE(FILE_DEVICE_UNKNOWN, 0x1726, METHOD_BUFFERED, FILE_ANY_ACCESS);
+
         [StructLayout(LayoutKind.Sequential)]
         public struct KERNEL_PROCESS_LIST_OPERATION
         {

KsDumperClient/Dumper.cs

@@ -125,6 +125,24 @@ private void openInExplorerToolStripMenuItem_Click(object sender, EventArgs e)
         {
             ProcessSummary targetProcess = processList.SelectedItems[0].Tag as ProcessSummary;
             Process.Start("explorer.exe", Path.GetDirectoryName(targetProcess.MainModuleFileName));
-        }
+        }
+
+        private void unloadDriverBtn_Click(object sender, EventArgs e)
+        {
+            var result = MessageBox.Show("Are you sure?", "Driver unload", MessageBoxButtons.YesNo);
+            if (result == DialogResult.Yes)
+            {
+                bool unloadResult = driver.UnloadDriver();
+                if (unloadResult)
+                {
+                    MessageBox.Show("Unload good");
+                }
+                else
+                {
+                    MessageBox.Show("Unload failed");
+
+                }
+            }
+        }
     }
 }